Hi, I've showed syzbot coverage of the bpf subsystem to you recently, here are the links I promised to send. If you go to: https://syzkaller.appspot.com/upstream coverage reports are in the Instances table in the Coverage column. Choose a one with more coverage, e.g.: https://storage.googleapis.com/syzkaller/cover/ci-upstream-linux-next-kasan-gce-root.html (but be aware it's a 200MB html with whole kernel source code embed). Then navigate to kernel -> bpf to see coverage on bpf sources. The most useful things would be to identify parts that are not currently covered, but can be covered from user-space and extend syzkaller to cover them: https://github.com/google/syzkaller/blob/master/sys/linux/bpf.txt Thanks